NVD

Id
21682  
Name
CVE-2016-7155  
Description
hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2016-12-12  
Seq
2016-7155  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
116583 21682 CVE-2016-7155 http://git.qemu.org/?p=qemu.git;a=commit;h=7f61f4690dd153be98900a2a508b88989e692753  View
116584 21682 CVE-2016-7155 [oss-security] 20160906 CVE request: Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings  View
116585 21682 CVE-2016-7155 [oss-security] 20160906 Re: CVE request: Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings  View
116586 21682 CVE-2016-7155 92772  View
116587 21682 CVE-2016-7155 [qemu-devel] 20160901 [PATCH v3] scsi: check page count while initialising descriptor rings  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5371 JVNDB-2016-006144 QEMU の hw/scsi/vmw_pvscsi.c におけるサービス運用妨害 (DoS) の脆弱性 QEMU (別名 Quick Emulator) の hw/scsi/vmw_pvscsi.c には、サービス運用妨害 (境界外アクセスまたは無限ループ、および QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-7155 93662 CVE-2016-7155 21682 2.1 4.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006144.html 2016-09-01 2016-12-13 View